rollup-plugin-typescript2

Build provenancecaution

No build attestation or trusted-publisher provenance is present, leaving the relationship between the published artifact and its source less transparent.

Release historycaution

The project is mature, with 80 releases over roughly 9 years, but only one release in the last 12 months despite a historical median interval of about 21 days, indicating a marked slowdown.

Repo bus factorcaution

One contributor made all commits in the last 3 months, creating a concentrated maintenance dependency with no organization backing shown.

Repo commit activitycaution

Only one commit was recorded in the last 3 months, showing sparse recent maintenance and reinforcing the slower release cadence.

Security policycaution

The repository has no security policy, which weakens vulnerability-reporting transparency, although this is a documentation gap rather than evidence of unsafe behavior.